$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/49ADA7183C6111F0BB3B1A85C4F9AE02.roa File: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (raw, json) Hash identifier: glN4k7urNUEminalwjQaEl9qzQ9uaPGYJxVPLRonhOg= Subject key identifier: B8:47:86:AF:7A:33:0A:52:51:17:BC:60:9D:79:A3:1F:6F:54:D5:36 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0D41 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/49ADA7183C6111F0BB3B1A85C4F9AE02.roa Signing time: Sat 04 Oct 2025 18:17:42 +0000 ROA not before: Sat 04 Oct 2025 18:17:42 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141209 IP address blocks: 59.152.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3393 (0xd41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Oct 4 18:17:42 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e164c6-59b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a6:53:78:61:c6:08:ea:ba:58:3d:f2:13:ed: 5b:1c:5e:34:6b:1a:75:a2:b6:62:c1:f6:18:28:27: 52:8f:0d:83:ec:7d:f5:fb:e7:ed:dc:54:3d:82:85: 9f:bd:3d:cf:b0:bc:6d:bd:03:87:09:af:47:3d:4a: b7:20:28:ae:30:96:18:ee:02:72:42:64:f3:45:3d: 69:80:8a:16:ab:14:1c:8d:02:78:a8:15:c9:db:20: 16:3f:ef:2c:0b:88:55:d5:37:93:64:b7:ff:2d:c4: b8:33:90:16:43:a4:ec:b4:a9:47:cb:b8:aa:ab:fe: bf:a1:97:80:7c:71:1a:3f:87:00:ac:77:2d:7e:ae: cd:80:a3:57:1c:d0:c1:3e:6f:c5:ff:0e:5d:2f:65: 7b:7f:79:7d:45:2e:8d:21:a8:c2:10:6d:f6:c9:ed: a7:9a:e4:c8:f4:e5:01:b0:73:55:20:69:0e:66:9b: 12:a3:4e:99:e7:23:62:30:07:69:95:bc:a1:1d:a1: 2b:87:be:f5:6f:f0:a9:da:45:32:a8:b3:64:56:f4: c1:a1:24:b5:38:e6:72:0e:5e:17:64:9d:a9:2e:b3: d5:f6:fc:5d:49:eb:ba:18:b5:d7:8c:7e:ad:12:3c: 43:62:06:8f:f5:02:3d:5e:3c:51:30:02:68:49:63: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:47:86:AF:7A:33:0A:52:51:17:BC:60:9D:79:A3:1F:6F:54:D5:36 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/49ADA7183C6111F0BB3B1A85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.152.106.0/24 Signature Algorithm: sha256WithRSAEncryption 37:c5:0e:cd:f9:cb:cd:82:ea:13:f5:93:cb:e5:f5:cc:35:e0: 56:75:f9:ba:fe:17:d0:3a:54:08:18:66:b2:48:5e:bf:36:03: cf:ef:4a:20:65:c0:f9:1f:e1:49:bc:95:dc:8f:c3:c6:54:ed: a5:55:d8:4c:11:3b:d5:48:a9:ba:81:95:58:e5:20:c1:29:b6: 49:4c:b3:09:81:a4:2d:a5:9a:46:86:c4:01:81:b2:07:24:f0: 46:53:89:96:dd:17:c5:49:8c:d1:a3:43:33:ed:e9:47:23:75: a3:6d:50:d3:a5:59:65:0c:b3:95:11:48:94:87:95:bd:84:3d: a4:c5:4e:fa:8a:52:e0:ed:bc:9a:9e:0f:c5:47:45:f3:62:3e: 5d:ca:e2:c5:56:19:e3:e9:42:c5:1c:f7:c4:c8:cd:df:e9:9d: 5d:5b:6e:61:16:2b:6e:18:4c:48:de:53:50:8b:e7:a7:ca:12: bf:52:03:34:52:18:ee:60:06:43:63:aa:7d:29:af:11:9a:b1: 0b:6a:7d:d6:46:d7:33:61:b5:aa:42:d4:da:fb:97:94:2e:90: 07:2d:02:80:46:66:4f:ab:69:ce:80:5e:7b:c0:cf:52:27:ca: 9c:e2:db:dc:53:4c:5e:a3:04:52:e3:95:57:b2:e0:9b:cb:9d: 9f:c5:d6:48 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjUxMDA0MTgxNzQyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxNjRjNi01OWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06ZTeGHGCOq6WD3yE+1bHF40axp1orZiwfYYKCdSjw2D7H31++ft3FQ9goWf vT3PsLxtvQOHCa9HPUq3ICiuMJYY7gJyQmTzRT1pgIoWqxQcjQJ4qBXJ2yAWP+8s C4hV1TeTZLf/LcS4M5AWQ6TstKlHy7iqq/6/oZeAfHEaP4cArHctfq7NgKNXHNDB Pm/F/w5dL2V7f3l9RS6NIajCEG32ye2nmuTI9OUBsHNVIGkOZpsSo06Z5yNiMAdp lbyhHaErh771b/Cp2kUyqLNkVvTBoSS1OOZyDl4XZJ2pLrPV9vxdSeu6GLXXjH6t EjxDYgaP9QI9XjxRMAJoSWMX7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLhHhq96 MwpSURe8YJ15ox9vVNU2MB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE5OTgvQUIzNEZCRDRGMjU4MTFFOUI3NUUzQzcwQzRGOUFFMDIvNDlBREE3MTgz QzYxMTFGMEJCM0IxQTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA7mGowDQYJKoZIhvcNAQELBQADggEBADfFDs35y82C6hP1 k8vl9cw14FZ1+br+F9A6VAgYZrJIXr82A8/vSiBlwPkf4Um8ldyPw8ZU7aVV2EwR O9VIqbqBlVjlIMEptklMswmBpC2lmkaGxAGBsgck8EZTiZbdF8VJjNGjQzPt6Ucj daNtUNOlWWUMs5URSJSHlb2EPaTFTvqKUuDtvJqeD8VHRfNiPl3K4sVWGePpQsUc 98TIzd/pnV1bbmEWK24YTEjeU1CL56fKEr9SAzRSGO5gBkNjqn0prxGasQtqfdZG 1zNhtapC1Nr7l5QukActAoBGZk+rac6AXnvAz1Inypzi29xTTF6jBFLjlVey4JvL nZ/F1kg= -----END CERTIFICATE-----Generated at Wed Nov 5 15:21:24 2025 by rpki-client